Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
File:                     mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft (raw, json)
Hash identifier:          xNiHvJtGUWjNYlhs6wLtNOTKBGFTt2wlha+gR/gEbds=
Subject key identifier:   EB:CD:09:C6:D9:A7:E1:4B:4F:15:73:49:EF:85:D1:E8:A0:AF:43:04
Authority key identifier: 99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6
Certificate issuer:       /CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
Certificate serial:       01A0E777BDA32DEA4EC6CEFE30806271D835
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
Manifest number:          1766
Signing time:             Mon 28 Sep 2026 10:02:59 +0000
Manifest this update:     Mon 28 Sep 2026 10:02:59 +0000
Manifest next update:     Tue 29 Sep 2026 10:02:59 +0000
Files and hashes:         1: D1heTXn7CKy5zLZ_HwZK9LTU77c.roa (hash: 8+cYEf9ivILDKmKrQsHq9USPOFeHqeF4AHnuJu39UqI=)
                          2: SpSWWIAX_co-S7OGVe4xxOaTumQ.roa (hash: eWFs5jFFJQvUBfi8O0eZY0oTE1BIWFbt9F0ZJ8qa89c=)
                          3: fI9PBxiiMOsKCtnOXwqzP5WZ3iw.roa (hash: y1cXN1mGBdJu2MTeUqDUwC/XHDAJM3lueicXGuEYI3I=)
                          4: lBg3_ekP2XBYVM3th5LmKxYKUuE.roa (hash: DDkeLmqGCMtQYRPOsdUTG5xK68Edb+Mfg+tAtB+HqA8=)
                          5: mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl (hash: B0BxVgXcyMMOPQcuuhS37A3Z9b8WvKa/ssb+Dk+Ttp0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 08:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e7:77:bd:a3:2d:ea:4e:c6:ce:fe:30:80:62:71:d8:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
        Validity
            Not Before: Sep 28 10:02:59 2026 GMT
            Not After : Sep 29 10:02:59 2026 GMT
        Subject: CN=ebcd09c6d9a7e14b4f157349ef85d1e8a0af4304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:eb:ff:8f:b2:b3:c7:41:b7:74:0f:5c:db:ad:
                    eb:d1:e5:67:e3:a2:f4:94:86:51:ee:63:c4:b1:5f:
                    f6:1f:42:45:73:d2:99:20:d8:76:f9:4c:04:6f:be:
                    12:d4:8b:68:73:24:d3:4e:19:bc:fb:30:2f:fe:58:
                    00:72:f3:16:60:4d:1e:1c:62:4d:b7:c1:c0:c8:41:
                    54:4a:10:1e:61:c1:65:35:11:35:15:5f:00:c6:4b:
                    c5:2e:79:21:ae:0c:3f:74:70:47:57:c9:9f:f5:f6:
                    a6:f4:a9:09:2b:5a:03:14:31:08:71:36:5a:47:e2:
                    3d:99:b3:7b:9d:50:bd:36:d2:02:6d:88:c1:9f:2a:
                    a5:92:3f:49:1c:ff:ab:c5:f6:35:4f:f2:a7:cc:d1:
                    fd:cc:cd:fd:32:80:51:35:59:46:79:f6:d9:ee:7b:
                    56:0f:63:93:e2:63:63:29:4f:25:75:45:74:52:30:
                    22:01:f7:aa:32:c6:3f:b5:f7:7b:96:da:ac:5e:b2:
                    1f:e4:c5:4e:d1:fc:5a:32:46:df:64:72:16:16:81:
                    cb:ce:0b:59:89:a2:bc:22:c6:eb:d4:e3:06:e6:a4:
                    a8:ad:f9:5a:6a:fd:70:4a:69:14:ce:35:e5:73:a9:
                    29:27:be:b8:b1:1c:62:80:4b:09:19:74:7a:a6:c9:
                    0e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CD:09:C6:D9:A7:E1:4B:4F:15:73:49:EF:85:D1:E8:A0:AF:43:04
            X509v3 Authority Key Identifier:
                keyid:99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:c7:b5:86:af:18:f2:cf:d1:e2:ac:09:ed:ab:f3:10:31:98:
         be:62:ba:16:f9:f7:3b:cb:3f:0d:25:9c:00:28:9a:75:18:ce:
         87:2b:e1:e7:fd:f0:76:6b:aa:3b:c7:02:2e:84:3c:e2:12:07:
         81:5a:04:a9:56:8d:90:b3:63:5b:66:13:7f:9e:a8:59:86:08:
         ad:94:f5:d6:04:7d:7f:73:89:4a:1c:39:97:fe:62:11:93:d4:
         cb:8c:38:f0:51:02:6e:82:b8:c3:0c:c6:32:bf:4f:aa:81:39:
         5b:f3:42:37:0c:5c:f9:f7:6d:cf:31:ca:35:a6:45:25:ee:68:
         67:7c:f5:4c:e8:2a:d5:cb:ab:87:95:39:3f:23:2c:90:57:73:
         ed:98:e3:79:51:e8:ff:0a:6b:ca:1b:8e:b8:4a:22:ce:18:97:
         6c:18:e8:73:97:3d:0c:cf:33:20:a8:ac:e7:57:82:fc:ac:a8:
         a1:64:5a:ae:0a:36:a8:9a:10:45:27:13:c2:13:65:8f:b3:ee:
         28:19:80:a8:4b:f7:56:24:e5:99:d1:e6:7f:89:5e:f2:bd:92:
         f1:85:dc:9b:a6:76:b5:86:8e:ec:fd:a9:42:c2:85:54:f3:95:
         92:11:d6:e1:2e:6c:82:20:31:77:4a:fe:61:fb:03:1b:31:9f:
         22:65:d6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:50:31 2026 by rpki-client